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Related Patennt Applications 

This application claims benefit of the priority date of the U.S. Provisional Patent 
Application Sen No. 60/428529, filed on November 23, 2002, and entitled "RFID tags 
for legal certification of document identify and associated information," inventors 
5 Kathleen Lane and William Lane. This application additionally claims benefit of the 
priority date of the U.S. Patent Application Ser. No. 10/456,454, filed on June 7, 2003, 
and entitled "Birth and other legal documents having an RFID device and method of use 
for certification and authentication," inventors Kathleen Lane and William Lane 
Field off the Imvemtiom 

10 The present invention relates to devices, systems and methods used to associate 

and authenticate data with a document such as a financial instrument by means of a radio 
frequency identification device ("RFID"). 
Backgronnmd off the Imiveinitioe 

Automatic identification (" Auto-ID") technology is used to help machines 

15 identify objects and capture data automatically. One of the earliest Auto-ID technologies 
was the bar code, which uses an alternating series of thin and wide bands that can be 
digitally interpreted by an optical scanner. This technology gained widespread adoption 
and near-universal acceptance with the designation of the Universal Product Code 
("UPC") - a standard governed by an industry-wide consortium called the Uniform Code 

20 Council. Formally adopted in 1973, the UPC is one of the most ubiquitous symbols 
present on virtually all manufactured goods today and has allowed for enormous 
efficiency in the tracking of goods through the manufacturing, supply, and distribution of 
various goods. 
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However, the bar code still requires manual interrogation by a human operator to 
scan each tagged object individually with a scanner. This is a line-of-sight process that 
has inherent limitations in speed and reliability. In addition, the UPC bar codes only 
allow for manufacturer and product type information to be encoded into the barcode, not 

5 the unique item's serial number. The bar code on one milk carton is the same as every 
other, making it impossible to count objects or individually check expiration dates. 

Currently cartons are marked with barcode labels. These printed labels have over 
40 "standard 11 layouts, can be mis-printed, smeared, mis-positioned and mis-labeled. In 
transit, these outer labels are often damaged or lost. Upon receipt, the pallets typically 

10 have to be broken-down and each case scanned into an enterprise system. Error rates at 
each point in the supply chain have been 4-18% thus creating a billion dollar inventory 
visibility problem. Only with RFID does the physical layer of actual goods automatically 
tie into software applications, to provide accurate tracking. Also, none of the information 
of these barcodes is protected or "hidden" from unauthorized readers, making 

15 counterfeiting and fraud easy and raising concerns about the loss of privacy. 

The emerging RFID technology employs a radio frequency ("RF") wireless link 
and ultra-small embedded computer chips, to overcome these barcode limitations. RFID 
technology allows physical objects to be identified and tracked via these wireless RFID 
tags, or 'tags". An RFID tag may function like a bar code that communicates to a reader 

20 automatically without needing manual line-of-sight scanning or singulation of the 
objects. Applied RFID technology promises to radically transform the retail, 
pharmaceutical, military, and transportation industries, as well as many product or 
document distribution methods. 
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An RFID system begins with a reader sending out electromagnetic signals to find 
a tag. When the radio wave hits the tag and the tag recognizes the reader's signal, the 
reader decodes the data programmed into the tag. The information is then passed to a 
server for processing. By tagging a variety of items, information about the nature and 

5 location of goods can be known instantly and automatically. 

An RFID system may consist of two primary components, an RFID tag ("tag") 
and a "tag reader". The tag typically includes an IC chip and an antenna. The IC chip 
may include a digital decoder needed to execute the computer commands that the tag 
receives from the tag reader. The IC chip also includes a power supply 

10 circuit to extract and regulate power from the RF reader; a detector to decode 
signals from the reader; a transmitter to send data back to the reader; anti- 
collision protocol circuits; and at least enough EEPROM memory to store its 
EPC code. 

Certain prior art RFID systems use reflected or "backscattered" radio frequency 
1 5 (RF) waves to transmit information from the tag to the reader. Since passive (Class- 1 
and Class-2) tags get all of their power from the reader signal, the tags are only powered 
when in the beam of the reader. 

Semi-passive and active tags have a battery to provide power to the chip. This 
greatly increases read range, and the reliability of tag reads, because the tag doesn't need 
20 power from the reader. Class-3 tags only need a 10 mV signal from the reader in 

comparison to the 500 mV that a Class- 1 tag needs to operate. This 2,500:1 reduction in 
power requirement permits Class-3 tags to operate out to a distance of 100 meters or 
more compared with a Class- 1 range of only about 3 meters. 
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In 2003, the worldwide total RFID market size was $1.5B in 2002 and has been 
growing rapidly. The total RFID market will grow to $7.25B by the year 2008. 

National government agencies, authorized financial institutions or their authorized 
agents are often responsible for creating, publishing, and authenticating financial 
5 instruments. A financial instruments is defined herein to include an electronic document 
or a hard copy document that is, represents, or is materially related to a financial record, 
money, a monetary value, an exchange value, currency, a payroll check, a personal 
check, a cashiers check, a certified check, a negotiable bond, a registered security, a 
credit card, a debit card, a credit note, a debit note, a promissory note, a title document 
10 and/or other suitable documents known in the art that contain or relate to a financial 

document, an ownership right or a title. The term financial instrument as further defined 
herein includes coupons, tickets, airline tickets, train tickets, bus tickets, rebates, rebate 
coupons, credits, credit notes, debits, debit notes, or other documents having financial 
relevance and issued by public or private persons, organizations, entities, associations, 
1 5 institutions, trusts or corporations. The term document is defined herein to include a 
financial instrument. 

RFID circuit tags, also referred to herein as RFID circuits and RFID tags are 
presently manufactured and used to track a plethora of items and materials, from items of 
apparel to volumes of coal as stored by grade and quality. Alien Technology, mentioned 
20 as one exemplary manufacturer, provides a 915 MHz RFID tag with 64 bits of field 
programmable memory and 16 bits of CRC. Yet the prior art fails to suggest or 
anticipate the use of RFID tags with Electronic Product Codes for federal, state or local 
government to certify a financial instrument, a legal documents or another suitable 
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document known in the art with a unique digital intelligent codes or the ability for third 
parties to use an intelligent Electronic Product Code to assure that a document is not 
counterfeit. More information about RPC codes may be found in published MIT reports 
and posted on websites like "EPCglobaT and "RFID Journal". 

5 It is an object of the present invention to provide new processes to protect against 

counterfeiting of financial instruments. 
Sumnimairy off the Presenntt Innvemtiomi 

Towards this and other objects made obvious in light of the present disclosure, a 
method and system are provided to enable the use of a secure financial instrument. 

10 In certain preferred embodiments of the method of the present invention the secure 
financial instrument may comprise an "electronic watermark", wherein an RFID tag 
having a small integrated circuit is coupled with, embedded within or laminated to a 
substrate of the instrument using techniques known to those skilled in the art. 

Certain alternate preferred embodiments of the method of the- present invention 

15 provide a system for providing a secure document, where the system includes a computer 
network having a computer and an RFID transponder. The computer has a database, and 
the database containing a first authorization key, and the secure document includes an 
integrated RFID circuit coupled with a flexible substrate. The flexible substrate having a 
surface, the surface visibly presenting an information. The integrated RFID circuit is 

20 coupled with the substrate, and the integrated RFID circuit having a durable memory, a 
controller, and a data security circuit. The durable memory includes an information 
storage sector and a protected sector, the information storage sector having a record of at 
least a portion of the information, and the protected sector having at least one datum not 
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recorded within the information of the flexible substrate. The controller is coupled with 
the durable memory and the data security circuit, and the controller enables access to the 
durable memory by the RFID transponder as authorized by the data security circuit. The 
data security circuit is provided for denying authority to the controller to execute 

5 instructions received in a message, where the message is not formatted at least partially in 
mathematical relationship to the first authorization key. 

Certain alternate preferred embodiments of the method of the present invention 
utilize the development of an Electronic Product Code schema to uniquely identify the 
entity creating the document, the unique instance of each document, the data related to 

10 each unique instance of a document, and a process uniting other parties involved in a 
document workflow when such third party automated processes employ an Electronic 
Product Code ("EPC") stored in the tag to read, write and store data stored in the tag or 
be available on or via a communications or computer network. The optional net effect of 
the invention is to prevent counterfeit documents being used to request and receive 

15 benefits, services or monetary payments from third parties who can now validate the 
documents and the related data are authentic. An additional optional object of the 
method of the present invention is to discourage or inhibit unauthorized access to or 
modification of data stored or recorded within the RFID tag. 

In first preferred embodiments of the present invention, the RFID tag may contain 

20 a transponder, and the transponder may have recorded or enabled the recording of one, 
some, or all of at least the following types of electronic information that can be remotely 
accessed by an RFID reader. These data together may be or comprise the EPC. These 
types of electronic information include: 
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o a unique serial number embedded within a EPC, an EDC, or other information; 

o public descriptive information about this currency or document; 

o a first level of hidden information which may be used to determine the 

authenticity of the secure document and/or financial instrument; 
o a first password code or "authorization key" and encryption circuit to protect this 

first level of hidden information; 
o a second level of hidden information that can also be used to determine the 

authenticity of the secure document and/or financial instrument; and 
6 a second password code or "authorization key", different from the first, to protect 

the second level of hidden information. 

One, two, or more of the password codes, serial numbers, authorization codes, or 
other suitable data or information stored within and/or outside of the RFID tag may used 
to protect against counterfeiting or unauthorized modification of or access to information 
stored or contained in the RFID tag. Additionally, while a unique code, serial number, 
authorization code, or other suitable information may be used to help discourage, inhibit 
or detect counterfeiting, an alternate use may be to enable tracking and counting money. 
The EPC may be or comprise an Electronic Product Code as issued by EPCglobal that 
provides access to information stored on the Internet. 

To save time and improve accuracy, the EPC information stored in durable 
memory may be designed to be automatically written into and read out of the tag via the 
reader. 

The hidden information may optionally be useful to detect counterfeit currency 

and other counterfeits of other important documents. The lower levels of password-coded 
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information may be used to protect merchants, vending machines, bank tellers, and others 
from counterfeit currency. However the widespread use of such first level passwords, 
may make a first level password more vulnerable to compromise and fraud. Therefore 
the first level of electronic password security may be backed up with multiple higher 

5 levels of authentication security, each level of security optionally comprising an 

independent security code or plurality of codes. In certain preferred embodiments of the 
present invention, millions of merchants may have access to the first level password 
codes, while only a few hundred thousand bankers will have the second level security 
password codes. The second level security codes may thus more securely be used to test 

10 the currency with both first and second level codes. And an even smaller number of 
entities, such as regional banks, may back up the local banks with a third level of 
authentication. Finally, a government agency or authorized agent of a government 
agency may have a sixth level of code that is shares with no one — and which no one 
even might know exists — that that the agency or agent uses surreptitiously to look for 

15 counterfeiting based upon illegal transmission of knowledge from the highest level of 
security. 

Certain secure documents or financial instruments, such as paper currency, a 
personal check, deed, lien, contract, and other registered secure documents are widely 
used and efficient instruments for representing monetary value, ownership, and other 
20 agreements among people. Authority for issuing and management of such documents 
may also be transferred from one agency to another. For example the Federal 
Government or other authorized public or private agent may delegate to a printer the 
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authority to print currency simply by transmitting certain secret information and other 
authorization codes to that printer. 

According to certain yet alternate preferred embodiments of the method of the 
present invention, an RFID tag can optionally be used to may be used to uniquely identify 

5 and authenticate a specific financial instrument or other suitable document known in the 
art. In certain preferred embodiments of the method of the present invention, an EPC can 
be factory embedded during a fabrication process, such as a paper printing process, 
and/or created at print time by an authorized legal entity or an authorized agent, and 
attached to the printed paper or other suitable substrate known in the art, or by use a 

10 combination of factory manufacturing and printing processes. Certain prior art 

manufacturing techniques for coupling RFID tags with paper and other suitable substrates 
known in the art are described in detail in technical papers and other public documents 
published by companies like the Alien Technology Corporation of Morgan Hill, CA, 
Matrics Corporation in Columbia, Maryland, and the Massachusetts Institute of 

1 5 T^^hnology in Cambridge, Mass. 

A RFID tag can be included with financial documents, certified documents or 
other authentic documents and be used to validate a document and/or the data in the 
document is authentic when a request for services, benefits, or monetary payment 
authorized by the document is made. The EPC may be embedded in a memory chip or a 

20 durable memory contained within a smart tag on individual documents. The chip can be 
scanned by a radio frequency "reader," which transmits the document's embedded 
identity code to a network, where "real" information about the document can be kept. 
That information is then communicated back from the network to provide whatever 
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information is needed about that product to the requestor. The information stored within 
the RFID tag or accessed on the network may optionally be used to identify what entity 
printed the document. An RFID tag might include a unique serial number which can 
identify a particular instance an authenticating agency printed a document and the data 

5 related to a particular instance of a printed document. Such related data can provide the 
same rights and privileges to an authentic document as a raised corporate seal or bar code 
does and may either supplement or replace such corporate seals. Additionally, a digital 
EPC might refer to information on the network or information stored and read within the 
RFID to identify a creator of the document and associate other data as related to the 

1 0 authentic document bearing or coupled with the RFID tag. Third parties can develop 
business processes utilizing the EPC to validate the document and data on the document 
is authentic before granting services, benefits, or monetary payments to individuals 
presenting the documents as authentic. The digital EPC can include a code identifying 
the issuer of the document, a document type, a data, and a unique serial number. When 

1 5 combined, these parts of the EPC uniquely identify a particular document. The EPC can 
enable other business processes to manage and access data related to the document which 
may not be printed on the document or stored in the RFID tag but is available in 
electronic form referred and linkable in a remote database. RFID may be the basis for a 
set or plurality of digital EPC's. The RFID tag may be read only, or may utilize other 

20 tags with read- write functionality or even more advanced capabilities. Certain 

implementations of EPC's might not depend on RFID technology, but rather employ 
suitable alternate methods known in the art of reading an identifying data from a 
document or a financial instrument. 
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Certain other alternate preferred embodiments of the method of the present 
invention more particularly relate to the use of RFID tags by a trusted authenticating 
agent to create and embed a unique digital EPC on documents which can be used by third 
parties as a means to authenticate the document and data related to the document. In 

5 particular, the present invention covers the use of RFID tags by authenticating agents to 
uniquely identify each instance of a document creation and enable third parties to 
reference such EPC to validate such document and related document data as authentic, 
whether such data is printed on the document or available on a network. 

The integration of radio frequency identification ("RFID") circuit tags as an 

10 intelligent digital EPC enabling the tracking and authentication of hard copy documents 
and data related to the documents is a convergence of technologies that is often useful for 
authenticating agents in managing document identification and deterring counterfeit or 
other unauthorized copies of certified or other legal documents. 

Certain additional alternate preferred embodiments of the method of the present 

15 invention utilize intelligent RFID technology with a unique EPC whereby the EPC can be 
added to each printing of certified or other legal documents to uniquely identify the 
document and prevent other parties from counterfeiting such currency or financial 
documents. The RFID tag enables existing passive printed documents to become smart 
and interactive, enabling automated processes to validate a document and data related to 

20 the document is real, not counterfeit nor revoked, when a document is presented to 

request and receive services, benefits or monetary payments. The invention also enables 
new automated business processes which can "read" hidden invisible digital data 
embedded in an RFID tag attached to a suitable substrate known in the art, such as a 
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paper document or paper currency. The present invention may optionally stores a unique 
EPC within the RFID and associates the RFID tag with a specific document and a 
specific transaction enabling third parties to easily identify the authenticating agency that 
created the document and authenticate the document and the data on the document. The 

5 invention optionally uses the EPC code as a means for third parties to be assured a 
document being presented is an authentic document. The invention also uses the EPC 
code as a database pointer enabling automated business processes to access data related 
to the document stored in a network database. 

The RFID tag may also include and associate a GPS chip to the document for 

10 future tracking and location of legal documents. 

In certain yet additional preferred embodiments of the method of the present 
invention are applied within an information technology system. The information 
technology system ("IT system") may comprise a communications network or a 
distributed computer network, such as an Intranet, an extranet or the Internet. 

1 5 RFID tags may be embedded in printed authentic documents by a paper 

manufacturer when the paper is printed or may be attached to the document as part of a 
computer print process. Some combination of factory printing and local computer 
printer printing may be applied to read and store all elements of the EPC. The certified 
copy printing process may write and store a serial number on the tag, or the serial number 

20 may be attached to the paper during the paper printing process and the IT process reads 
the serial number stored in the RFID and associates it with the data file/request for an 
authentic document. In either embodiment, the certified document printing process will 
provide rules and processes for when and how to read or store EPC information, 
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dependent on whether an RFID tag is embedded in the paper at paper print or will be 
added when the document is printed on a local printer. The unique EPC is recorded and 
made available to third parties through an EPC database available on the Internet. The 
amount and types of data stored in the RFID tag or linked and accessible via remote 

5 databases is a fluid definition and may change as new RFID technology allows more data 
to be stored and accessible in the RFID tag. In other instances, the RFID tag serial 
number may point to an external EPC Database which can identify the location of a data 
record users can access or associate other business processes with. The IT system may 
further or alternatively optionally employ RFID write systems and/or read systems 

10 whereby information may be written into RFID tags and read from RFID tags. 

In certain preferred embodiments of the method of the present invention, requests 
are made to the authenticating agency for certified copies of a financial instrument, the 
authenticating agent utilizes RFID technology to create and attach a unique intelligent 
EPC in each instance a certified copy of an official record is printed. Said EPC can 

15 identify and allow third parties to authenticate documents and information associated 

with said documents. The EPC may comprise or be an Electronic Product Code as issued 
by EPCglobal that may be used to access information stored on a network of computers 
that may include the Internet. The EPC may also point to the location of the database 
record(s) used by the authenticating agency as a data source for creating the certified 

20 document, and access codes determining whether such database records or RFID data 
fields can be read or written to in transactions requiring validation of identity. The IT 
processes can include maintaining an audit trail of entities requesting validation of 
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identity in data transactions using such documents to validate/verify the data on the 
document. 

In certain still additional preferred embodiment of the method of the present 
invention, an authenticating agent collects, stores, associates and authenticates unique 
5 identity data with stored records used as a data source for creating and printing certified 
documents. 

If global positioning system ("GPS") data or other IT information (user code 
attached to a street location) is stored on nearby readers that can communicate with a 
specific document, the system may use well known IT processes to locate and physically 
10 track these documents. 

The authenticating agency may also elect to distribute authenticated documents 
electronically rather than in paper form. The authenticating agency or agent use the 
RFID tag as a reference to data stored on a network rather than printed on a paper 
document; RFID processes may require passwords or other identifying data for third 
15 parties to access remote data or other digital data stored in the RFID tag. The IT 
Processes of certain alternate preferred embodiments of the method of the present 
invention may then read the authenticating codes and keys, which may include a 
password, validate the code, keys and password within the RFID tag, access hidden 
identity data stored in the RFID tag or in a remote database according to rights and 
20 privileges assigned by the authenticating agency. 

Certain alternate preferred embodiments of the method of the present invention 
provide IT processes to include a legally recognized and accepted digital code or image 
recognized as the representation of the authenticating agency. 
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The method of the present invention optionally provides processes to read the 
RFID tag and request authentication from the authenticating agency that the data and the 
document are still valid or are suspect or known to be invalid. The authenticated data can 
be read and automatically populate the requestor database from either data in the RFID 
5 tag or data from the authenticating agency database. 

Another alternate preferred embodiment of method of the present invention may 
be used to track documents and transactions involving the verification and validation of 
information contained in the certified documents and/or to track the location of the 
documents or entities embedded with data authenticated by the authenticating agency or 
1 0 other authorized agency or agent. 

In still other additional alternate preferred embodiment of the method of the 
present invention, an audit trail can optionally be kept identifying one, a plurality or all 
places where a financial instrument has been, or has transferred possession, or changed 
ownership, by means of GPS data collection. An RFID tag or reader with GPS 
15 capabilities might optionally be included as part in other embodiments of the method of 
the present invention. The GPS capability may enable tracking and locating of the 
document should it become lost or stolen. 

Certain still other alternate preferred embodiments of method of the present 
invention may optionally provide in combination or singularity the following features, 
20 aspects or capabilities: 

1. Database Pointer . The intelligent RFID tag embedded on the authentic 
documents may include a unique transaction or other attribute identifier — called a 
Electronic Document Code "EDC". The unique identifier enables third parties to directly 
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access external databases storing related data. Such database pointer eliminates the need 
for service validation processes to enter and match data fields from the authenticating 
agency database. Instead, such unique EPCs can point directly to data fields stored on a 
network and available in various third party service processes. Although it is possible to 

5 enter data printed and visible on a document into a screen before submitting a request to 
the authentication database via the communications network to authenticate personal 
data, the ability to read an RFID tag containing a pointer to a specific authentication 
1 database and a specific database record used for authentication of the document or the 

data in the document facilitates the accuracy and speed of the authentication server. 

10 With or without a direct pointer to the identification database, the authentication 

database or a database system may additionally or alternatively implement complex 
algorithms, which attempt to match and authenticate identification data. 

This EDC database pointer may optionally enable the authenticating agency to 
notify the requestor if the information in the database record has been changed or 

15 revoked. 

2. Unique EPC for all documents where third parties desire to ascertain the 
document is authentic . The unique EPC enables the requestor to validate the documents 
and related data is authentic. 

3. Authenticates document identity in offline transactions . Most credit cards 
20 have added an additional data or code to a credit card account. This code is not passed 

through any automated systems and is not printed on a credit card transaction slip. 
Therefore if someone is trying, without authorization, to use a credit card in an offline 
transaction, they cannot do so unless they have your credit card in their physical 
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possession. The RFID tag on an identification document can be used in the same 
manner, providing the same secondary level of authentication credit card processing 
requires for offline transactions involving identity documents. 

4. Tracking authentic documents . RFID tag technology may optionally enable 
5 location tracking of authentic documents. RFID readers will be extensively deployed 
geographically. Such readers can silently detect the presence of RFID tags on authentic 
documents and log the location where the RFID tag was read. 
Brief Description!! off the Drawimigs 

The accompanying drawings, which are incorporated in and form a part of this 
10 specification, illustrate embodiments of the invention and, together with the description, 
serve to explain the principles of the invention: 

FIG. 1 is an illustration of a document bearing an RFID circuit tag coupled with a 
substrate with which a preferred embodiment of the method the present invention may be 
implemented. 

15 FIG. 2 is a schematic diagram of the RFID circuit tag of FIG. 1 . 

FIG. 3 is a process and software flow chart of a preferred embodiment of the 
method of the present invention that may be implemented using the RFID circuit tag of 
FIG. 1 

FIG. 4 is a yet alternate preferred embodiment 14 of the present invention 
20 comprising a printer, a database communicating with the printer via a communications 
network and the RFID document of FIG. 1 . 
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FIG. 5 is a process and software flowchart of an alternate preferred embodiment 
of the method of the present invention that may be implemented with the printer of FIG. 
4. 

FIG. 6 is an illustration of a plurality of RFID readers of FIG. 1 geographically 
5 distributed and in communication over the communications network of FIG. 4. 

FIG. 7 is a schematic diagram of an alternate preferred embodiment of the present 
invention. 

FIG. 8 is a flowchart of a method of the present invention that may be 
implemented by means of the preferred embodiment of the present invention of FIG. 7. 
10 FIG. 9 illustrates an RFID system. 

FIG. 10 presents an antenna and an integrated circuit optionally comprised within 
the RFID tag of FIG. 1 and/or the RFID tag of FIG. 9. 

FIG. 1 1 provides a block diagram with details of the IC chip portion of the 
preferred embodiment of the RFID tag of FIG. 1. 
15 FIG. 12 is a schematic diagram of a data encryption circuit optionally comprised 

within the RFID tag IC chip of FIG. 1 1 . 
Detailed Description! off Preferred Enmfoodiraeinits 

Reference will now be made in detail to the preferred embodiments of the 
invention, examples of which are illustrated in the accompanying drawings. While the 
20 invention will be described in conjunction with the preferred embodiments, it will be 

understood that they are not intended to limit the invention to these embodiments. On the 
contrary, the invention is intended to cover alternatives, modifications and equivalents, 
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which may be included within the spirit and scope of the invention as defined by the 
appended claims. 

Referring now generally to the Figures and particularly to FIG. 1, FIG. 1 is an 
illustration of preferred embodiment of the present invention 2, comprising an RFID 
5 circuit tag 4 attached to a substrate 6. It is understood that in certain alternate preferred 
embodiments of the present invention the substrate 6 may be one of a variety of suitable 
print media known in the art, e.g., paper, fabric, plastics, wood products, metal foils, and 
etc. The document 2, or RFID doc 2, may be or comprise a financial instrument, a 
document, a legal document, a coupon, a Uniform Commercial Code ("UCC") document, 

10 a certified document, a document recorded by a notary public, a document certified as a 
valid copy by a government agency, a tax document, an ownership document, a payment 
document, a lien document, a payroll document, a debt document, a credit document, an 
ownership transfer document, a real estate title document, an asset title document, a 
motor vehicle title, a check, a personal check, a payroll check, a cashiers check, a 

15 certified check, a credit card, a credit note, a promissory note, a debit card, a debit note, a 
rebate, a rebate coupon, a monetary note, a currency bill, a ticket, an airline ticket, a train 
ticket, a bus ticket and/or a contract. The substrate 6, or sheet 6, includes a visual pattern 
8, where the visible pattern may be a printed image, a typewritten image, a bar code 
image, an embossed image, an ink image, a handwritten image, a hand drawn image, a 

20 computer generated image, a heat imprinted image, an etched image, a painted image 
and/or a chemically treated image. 

An RFID communications device or "reader" 10 is used to read and/or write data 
from the RFID tag 4. The transmitted data may be information used to (1) validate or 
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authenticate data, (2) validate or authenticate an identity of a conduit, source, or 
destination of transmitted data, (3) or to authenticate or validate permission or 
authorization to read from and/or write onto the RFID tag 4. 

Referring now generally to the Figures and particularly to FIG. 2, FIG. 2 is a 

5 schematic diagram of the RFID circuit tag 4 of FIG. 1. The RFID circuit tag 4, or RFID 
tag 4, has a controller 4A, an operating memory 4B, a durable data memory 4C, an 
antenna 4D, a communications circuit 4E and a security/encryption circuit 4F. Data 
identifying and authenticating the identity of the RFID 2 tag are stored in the durable data 
memory 4C. In certain alternate preferred embodiments of the present invention the 

10 RFID tag 4 may comprise logical circuits and/or programmable logic circuits that direct 
aspects of the operation of the RFID tag 4 and may partially or wholly execute the 
operations of the RFID tag 4 without reliance upon a software program stored within or 
transmitted to the RFID tag 4. In the preferred embodiment 2 of FIG. 1 , the RFID tag 4 
has a software program at least partially stored within the durable memory 4C, and relied 

15 upon to direct the operation of the RFID tag 4. The antenna 4D receives radio signals 
from the RFID reader 10, or reader 10, and delivers the received signal to the 
communications circuit 4E. The communications circuit 4E digitizes the received signal 
and transmits the digitized signal to the controller 4A. The controller 4A may then access 
the security circuit 4F to authenticate the identity of the reader 10 and to determine if the 

20 reader 10 is authorized to request information from, or write information into, or 

otherwise direct the operation of the RFID tag 2. Information concerning the reader 1 0, 
and the instant attempt to access data stored in the RFID tag 2, may be recorded by the 
RFID tag 4 in the data memory 4C. The antenna 4D may be directed by the controller 4A 
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to transmit radio signals to the reader 10, wherein the radio signal includes data stored in 
the data memory 4C. The communications circuit 4E acts as enabler for these 
transmissions from the RFID tag 4 and provides a transmittable signal to the antenna 4D. 
It is understood that the prior art and conventional techniques of RFID circuit design and 
5 operation provides numerous alternate variations of RFID tags that may perform in 
accordance with the requirements of the method of the present invention, and that the 
details of the design and operation of the RFID tag 2 are illustrative and not limiting to 
the scope of the claimed invention. 

An optional GPS receiver 4G is coupled with the controller 4A. The GPS 

10 receiver 4G may receive signals from the global positioning system ("GPS") and process 
said signals to generate a location information that indicates the geographic position of 
the GPS receiver 4G. The GPS receiver 4, preferably located in a nearby reader but 
possibly attached directly to the tag, then communicates the location information to the 
controller for storage in the data memory 4C. The location information may be 

1 5 associated with other information stored in the data memory 4C, such as (1 ) text 

messages received RFID reader 10, or (2) an identity of a requester of data associated 
with a request received at approximately the same time by the RFID tag 4 that the GPS 
signals used to generate location information were received. The controller 4A, the 
operating memory 4B, the writeable data memory 4C, the antenna 4D, the 

20 communications circuit 4E, the security/encryption circuit 4F and the GPS receiver 4G 
communicate via a communications bus 4H. 

Referring now generally to the Figures and particularly to FIG. 3, FIG. 3 is a 
process and software flow chart of a preferred embodiment of the method of the present 
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invention that may be implemented using the RFID circuit tag of FIG. 1 and where the 
RFID circuit tag 4 is coupled with the document of FIG. 1. The RFID tag 4 is initialized 
by storing initialization data in the data memory 4C and optionally also storing an 
operating software program in the durable memory 4C. The RFID tag 4 subsequently 

5 detects an attempt to access data stored in the data memory 4C by the reader 1 0. The 
RFID may optionally create a record of any communications attempt by the reader 10 and 
store this record in the data memory 4C. Records of communications attempts by various 
readers 10 that document the identity of requestors of the data may optionally be stored 
and used as an audit trail to record the identity of agents having attempted to access, or 

10 successfully accessed, the data stored in the RFID circuit. The reader 10 may use 
biometric data and/or a secret code to gain access to the data stored in the RFID tag 4. 
The RFID tag 4 may in certain preferred embodiments of the method of the present 
invention access data stored in a remote data base 12 to authenticate the identity of the 
reader 10, or to authenticate the identity of a person requesting access to the data of the 

15 RFID tag 4, and to determine if the reader 10 and/or the requesting person is authorized 
to receive the data. This procedure may also be followed when the reader 1 0 is 
attempting to write data into the RFID tag 2. Where the RFID tag 4 determines that the 
reader 10 has not provided the necessary information, the RFID tag 4 will deny the 
information request, record information concerning the failed attempt by the reader 10, 

20 and return to a sensing state. In certain still alternate preferred embodiments of the 

method of the present invention the RFID tag 4 may attempt to transmit a message to the 
remote database 12 via the reader 10 and a communications network 20. The 
communications network 20 may be or comprise the Internet. The message may be a 
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revocation or alteration of a validity state of the document 2. The document 2 may be 
placed in one more validity states by an authority, where the validity states may include 
(1) a time limit to validity, (2)a maturity state wherein the financial document may be 
tendered for payment, (3) a revocation by the issuing authority or an another authorized 
5 authority, (4) an obligation state, (5) an encumbrance state, or (6) other suitable validity 
states known in the art and related to one or more characteristics of a financial instrument 
or document. 

Referring now generally to the Figures and particularly to FIG. 4, FIG. 4 is a yet 
alternate preferred embodiment 14, or print system 14, of the present invention 

1 0 comprising a printer 1 6, a database 1 8 communicating with the printer 1 6 via a 

communications network 20 and the RFID document 2 of FIG. 1. The communications 
network 20 may be or comprise via the Internet 22 and/or a wireless electronic 
communications network 24, and/or an electronic telephonic network 26. The substrate 6 
is inserted into the printer 16 whereby the visual pattern 8, as shown in FIG. 1, is formed 

15 on the sheet 6 by a printer head 28. The reader 10 accepts data from the remote database 
12 via the communications network 20 and/or a local source 30, such as a keyboard, and 
transmits the data to the RFID tag 4 to initialize the RFID tag 4 or to update the data 
stored in the RFID tag 4. A printer controller 32 receives data and instructions from the 
remote database 12 over the Internet 26 and via an interface circuit 34 and directs the 

20 printer head 28 and the reader 10 to transmit and print data to the document 2 in 

accordance with the received data and instructions. Alternatively or additionally, the 
printer controller 32 may optionally receive data and/or instructions from the local source 
30 and direct the printer head 28 and the reader 10 to transmit and print data to the RFID 
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doc 2 in accordance with the received data and instructions. The optional or alternative 
local source 30 is communicatively linked with the printer controller 32 in order to 
provide data to the printer 16 for recording upon the substrate 6. 

Referring now generally to the Figures and particularly to FIG. 5, FIG. 5 is a 
process and software flowchart of an alternate preferred embodiment of the method of the 
present invention that may be implemented with the printer 16 of FIG. 4, the database 12, 
the document 2 and RFID circuit tag 4 of FIG. 1. The sheet 6 is placed into the printer 
16, and data and/or instructions are received from the communications network 20 and/or 
the local source 30. The RFID tag 4 is then accessed and written into, and the sheet 6 is 
printed on by the printer head 28 under the direction of the printer controller 32 and in 
accordance with the received data and instructions. The sheet 6 may then removed from 
the printer 16. 

Referring now generally to the Figures and particularly to FIG. 6, FIG. 6 is an 
illustration of a plurality of RFID readers 10 of FIG. 1 geographically distributed and in 
communication over the communications network 20 and tracking, or used to track or 
record, the physical position of the document of FIG. 1 over time and as the document 2, 
or RFID doc 2, is moved between different locations. The tracking of the RFID doc 2 
made possible by the periodic or asynchronous contacts between the RFID doc 2 and one 
or more of the readers 10 reduce the potential for loss, misplacement and misuse of the 
RFID doc 2. 

The method of the present invention optionally provides various alternate 
embodiments that may include, one, two, all or a plurality of the following aspects, 
capabilities, and/or components: 
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The use of a digital EPC stored in one or more RFID tags attached to printed 
documents and used by authenticating entities to uniquely identify a legal 
document as a document created by the authenticating agency and which third 
parties can access in automated business processes to ascertain if a document is 
authentic. 

The use of a digital EPC stored in RFID tags 4 and attached to printed documents 
2, by authenticating entities or by the authorization of an appropriate entity, to 
uniquely identify (1) a particular instance of a document created by the 
authenticating agency and (2) the data referred to in the document 2. 
The creation of an EPC database stored and accessible on a computer network, 
preferably the Internet 22, which maintains the database 12 of documents 2 and 
the EPC printed on the document 2. A new EPC record record may be created or 
referred to by the authenticating agency for use in tracking each individual 
document. The EPC or EDC database may be proprietary to a particular 
authenticating agency or the authenticating agency may also decide to include the 
EPC in a public EPC or EDC database stored on a network and accessible by third 
parties to authenticate or process a document. 

The ability for (1) parties who originate and issue authenticated documents and 
optionally (2) third parties who process such documents, to use an EPC database, 
an EPC database, and/or a combined EPC and EPC database, as a means of 
maintaining status about a document. 

The use of a digital EPC on one or more printed documents to store data related to 
the document or transactions related to the document, and/or the ability to use the 
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EDC code as a pointer to a remote database utilizing the EDC code as a common 
identifier linking transactions related to the document and accessible to third 
parties. 

The structure of a common EDC which authenticating agencies and other parties 
can use to develop automated processes for locating and editing linked 
documents. 

The use of digital EPCs, EDCs, secret codes, and hidden digital information 
attached to documents, by public or private agencies, to identify and certify legal 
documents as authentic, in particular financial instruments, such as monetary 
notes, bills of currency, rebates, rebate coupons, and/or coupons. Monetary notes 
may include notes or currency bills having value denominations, such as (1) 
dollar bills issued by the United States Treasury, or (2) a monetary note, bill of 
currency, or financial instrument issued by a government, an agency, a 
corporation, an institution, an association, or an entity. 
The use of a combination of digital EPCs, EDCs, secret codes, and hidden 
information applied and attached various types of documents 2 used in 
commercial financial transactions by authenticating entities enabling third parties 
to validate the document 2 and data related to the document 2 is authentic, 
including checks, corporate shares, bonds, and currency. 

The use of a EPC by the authenticating agency and third parties who process such 
documents 2 to utilize the EPC as a means of attaching other data attributes to the 
document, such as status codes. For instance, if a third party cashes a document 2 
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that is a check, the automated processes may include a data attribute to the EPC 
database indicating that a third party cashed the check 2. 

The flexibility of the design of the EPC database, EPC database, and/or combined 
EPC and EPC database ("combined database") to store data or provide links to 
data depending upon the attributes of the RFID tag used. For instance, some 
RFID tags 4 would permit the EPC, EPC, and/or combined database to identify or 
be used to identify the authenticating entity and a unique serial number of a 
document or a particular unit of a type of product. Automated business processes 
may optionally access a record of the EPC, EPC or combined database, wherein 
the record was created when the document or unit was created in order to enable 
access to, and the ability to process, data related to the document or unit. In other 
instances, the design of the RFID tag may enable the authenticating entity and 
third parties to read, write and store document data within the RFID tag attached 
to, coupled with, or comprised within the document. 

Generating or employing an EPC that may optionally be stored in either write- 
once read-many memory, or by other suitable devices or methods known in the art 
that can ensure that a stored EPC cannot be modified. 

The use of RFID tags to identify and/or validate the authenticating agency who 
created the document, i.e. the originating agency, in a manner similar to or the 
same as (1) a corporate seal printed on a document does today to signify 
authenticity for the entity creating the document, and/or (2) an MICR coding on a 
check might imply or certify that a check was printed by a bank. 
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Associating a unique database record identifying the database record that an 
originating or authenticating agency, or its agents, used as source data, which can 
optionally be accessed or validated from a remote database 
Embedding the EPC code, where the EPC itself identifies, or indicates by 
reference to a database 12, (1) the identity or an identifier of an originating or 
authenticating agency of the document 2, (2) the printed transaction as either part 
of a preprinted form or added as part of a forms printing process hidden as digital 
data embedded or attached to the document 2, and (3) user profiles enabling third 
parties to access, read, write or update such hidden data. 
A redundant system for both printing information onto the substrate 6, for 
example paper, and also storing either all or portions of the printing information 
in the form of digital data in a RFID tag 4 that is integrally embedded within the 
substrate 6. 

Means for determining both the authenticity and accuracy of information printed 
on paper or other suitable flexible substrate material using data stored on an 
integrated circuit 4 embedded within the paper. 

A composite electronic and paper document 2 wherein the printed paper 
document 2 displays data stored in an integrated circuit 4 embedded within the 
document 2. 

Means for creating a three-way link between the printed or visually displayed 
information on a document 2, the electronic information stored in a memory 
embedded within the document, and/or the authority that generated or owns the 
document 2. 
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> An integrated device 4 for both printing on paper 6, writing data into, and 
reading data out RFID tags 4 embedded into such paper 6 or other suitable 
flexible substrate 6 known in the art. 

Referring now generally to the Figures and particularly to FIG. 7, an alternate 

5 preferred embodiment of the present invention 36, or document system 36, includes a 
secure document 38 and the computer communications network 20. A computer 40 
communicates via the communications network 20 with an RFID transponder 42. The 
RFID transponder 42 may send and/or receive information from an integrated RFID 
circuit 44 of the secure document 38. The computer 40 contains a database 46, and the 

10 database 46 stores a first secret code or authorization key 48. The computer 40 may at 
least partially format, encode or encrypt messages at least partially on the basis of a 
mathematical process that employs the first authorization key 48. The term computer is 
defined herein to be or comprise a personal computer, personal digital assistant, 
workstation, networked computer, computer network or other suitable electronic 

15 computer, calculator, computational engine, or device known in the art. The first 

authorization key 48 may optionally include of biometric data or a checksum that may be 
computed upon the basis of at least one datum stored within the integrated RFID circuit 
44 and at least a portion of the information printed on the secure document. 

The document system 36 may further comprise the printer 16, where the printer 

20 16 is communicatively coupled with the computer 40 and the printer 49 for adding visible 
information to a surface 50 of a flexible substrate 52. According to certain still alternate 
preferred embodiments of the method of the present invention, the document system 36 
may include a means for printing information onto the flexible substrate, and the durable 
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memory may store (1) a EPC, and (2) a print-time key, wherein the print-time key is 
written into the durable memory at approximately the moment that visible information is 
added to the flexible substrate. The printer 16 may further include an RFID transmitter, 
the transmitter for providing the print-time key to the durable memory. 

5 The secure document 38 further includes the flexible substrate 52 coupled with 

the integrated RFID 44. The flexible substrate 52 comprises the surface 50, wherein the 
surface 50 visibly presents a sensory perceptible image 54, the perceptible image 54 for 
visual, tactile or sensory observation by a human being. The image 54 may be perceived 
by a human being to communicate an information 56, such as a financial value, exchange 

10 value, or face monetary value. The integrated RFID circuit 44 has an antenna 57, a 

durable memory 58, an RF rectifier 60, a controller 62 and a data security circuit 64. The 
RF rectifier 60 receives energy by radio frequency reception and provides the received 
energy to the RFID circuit 44 to execute internal and input/output communications and 
for other electronic operations. The term durable memory is defined herein to include a 

15 static or non-volatile memory, or other suitable memory or RFID memory component 
known in the art. The memory 58 includes an information storage sector 65 and a 
protected sector 66. The durable memory 58 optionally storing a record 70 in the 
information storage sector 65 and/or the protected sector 66, and the record 70 having of 
at least a portion of the information 58. The protected sector 66 may optionally have at 

20 least one datum not recorded within the information 56 recorded upon the flexible 
substrate 52. The RFID controller 62 is coupled with the durable memory 58 and the 
data security circuit 64, and the controller 62 enables access to the durable memory 58 by 
the RFID transponder 42 as authorized by the data security circuit 64. The data security 
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circuit 64 denies authority to the controller 62 to execute instructions received in a 
message, where the message is not formatted, encoded or encrypted at least partially in 
mathematical relationship to the first authorization key. The durable memory 58 may 
further optionally include information that relates to one or more codes that specify (1) a 

5 nation, (2) a province, county, city or other suitable subunit of nation, (3) serial number, 
or (4) transaction code. 

The document system 36 may further comprise a plurality of secret authorization 
codes or keys 48, the plurality of authorization keys 48 stored within the durable memory 
58 and the plurality of authorization keys 48 stored within at least one data storage device 

10 74 communicatively coupled with the communications network 20. The plurality of 
authorization keys 48 arranged within a hierarchy, wherein the data security circuit 
authorizes the controller to execute an instruction received within a message, wherein the 
message is at least partially formatted in mathematical relationship to at least one of the 
plurality of authorization keys 48, and the data security circuit limits a scope of 

1 5 execution of the instruction or access to memory in accordance to the level of this 
particular authorization key within the hierarchy. 

The secure document 38 may be an airline ticket, a train ticket, a bus ticket, a 
coupon or a financial note, such as a personal check, a payroll check, a certified check, a 
cashier's check, a note of currency issued by a governmental authority. Where the secure 

20 document 38 comprises a payroll check or a payroll card, personal check, or other 

financial instrument wherein the RFID 44 and or the surface 50 of the flexible substrate 
52 may record a personal identification number 72 ("PIN"). The PIN 72 may be accessed 
by the RFID transponder 42 and/or the communications network 20 to reduce the 

Page 32 of 49 


incidence of cashing forged checks or unauthorized cashing of payroll checks. 
Information specifying or relating to the authorized amount of the payroll check may be 
provided on the flexible substrate 52 or within the RFID 44. The PIN 72 may be at least 
partially based upon, or mathematically expressing or derived from, suitable biometric 

5 data or voice data known in the art 

The RFID 44 may be coupled with the flexible substrate 52 prior to any printing 
or establishment of visual, tactile or otherwise sensory detectable images upon the 
surface 50 of the flexible substrate 52. The RFID 42 may also be coupled with the 
flexible substrate 52 at approximately the same time as a visually perceptible image is 

10 added or modified on the surface 50. 

In still other alternate preferred embodiments of the present invention the secure 
document 38 may be a title to a real property and the identification data may be stored 
within the RFID 44 and /or the provided on the surface 50 of the flexible substrate 52. 
The identification data may be used to associate the secure document 38 with lien and 

15 encumbrance information stored within the communications network 20, whereby a user 
may investigate if a real property identified in, described by or associated with the secure 
document 38 has a lien or encumbrance recorded within a database linked to the RFID 
transponder 44 or the communications network 20. 

The durable memory 58 may optionally store information related to an airline 

20 flight, the price of an airline ticket, or a travel destination. In certain still other alternate 
preferred embodiments of the method of the present invention, the durable memory 58 
may store information related to a manufacturer, a product identifier, and/or a redemption 
value of a coupon. 
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Referring now generally to the Figures and particularly to Figures 7 and 8, FIG. 8 
is a flowchart of a method of the present invention that may be implemented by means of 
the document system 36 of FIG. 7. In STEP 1, the first authorization key is established. 
The first authorization key is provided to the RFID in STEP 2. In STEP 3 the privacy 

5 circuit of the RFID is programmed to identify messages formatted, encrypted and/or 
encoded at least partially on the basis of the first authorization key. The first 
authorization key is provided to the computer in STEP 4. In STEP 5 a message is 
formatted, encrypted and/or encoded at least partially on the basis of the first 
authorization key. The message is transmitted from the computer to the RFID 

10 transponder STEP 6. In STEP 7 the message is transmitted from the RFID transponder to 
the RFID. The privacy circuit processes the message in STEP 8 to determine if the 
message is formatted, encrypted and/or encoded at least partially in mathematical 
relationship to the first authorization key. In STEP 9, where the message is not 
formatted, encrypted or encoded at least partially in mathematical relationship to the first 

15 authorization key, authority is denied to the controller to execute instructions received in 
a message. 

Referring now generally to the Figures and particularly to Figures 9 and 10, FIG. 
9 illustrates an RFID system 74 and FIG. 10 presents an antenna 76 and an integrated 
circuit 78 of tag 4. The RFID system 74 operates with a reader 80 sending out 
20 electromagnetic signals to communicatively link with the tag 4. When the radio wave hits 
the tag 4 and the tag 4 recognizes the reader's signal, the reader 80 decodes the data 
programmed into the tag 4. The information is then passed to a server 82 for processing. 
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The server 78 may be a computer. By tagging a variety of items, information about the 
nature and location of goods 84 can be known instantly and automatically. 

The RFID system 74 includes two primary components, the tag 4 and the tag 
reader 80. The tag reader 80 and the tag 4 may communicate via radio frequencies, 
wherein the tag reader 80 is or comprises an RP reader 80. The tag 4 includes the 
integrated circuit 78 and the antenna 76. The integrated circuit 78 includes a digital 
decoder needed to execute the computer commands the tag receives from the tag reader 
76. The integrated circuit 78 also includes a power supply circuit to extract 
and regulate power from the RF reader 76; a detector to decode signals from 
the reader; a transmitter to send data back to the reader; anti-collision protocol 
circuits; and at least enough EEPROM memory to store an EPC and/or EPC. 

The system 74 may, in certain alternate preferred embodiments of the 
method of the present invention, use reflected or "backscattered" radio frequency (RF) 
waves to transmit information from the tag 4 to the reader 76. Since passive (Class-1 
and Class-2) tags get all of their power from the reader signal, the tags 4 are powered 
only when the tag 4 is in the beam of the reader 76. 

Semi-passive and active tags 4 have a battery to provide power to the integrated 
circuit 78. This greatly increases read range, and the reliability of tag reads, because the 
tag 4 doesn't need power from the reader. Class-3 tags only need a 10 mV signal from 
the reader in comparison to the 500 mV that a Class-1 tag needs to operate. This 2,500:1 
reduction in power requirement permits Class-3 tags to operate out to a distance of 100 
meters or more compared with a Class-1 range of only about 3 meters. 
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Referring now generally to the Figures and particularly to FIG. 1 1 and FIG. 12, 
FIG. 1 1 illustrates an alternate preferred embodiment 86 of tag 4, or RFED 86. FIG. 12 is 
a schematic diagram of a data encryption circuit 4F of tag 4 or RFID 86. FIG. 1 1 
provides a block diagram for the secure RFID 86. Although important, the power 
5 generation and regulation circuits, the digital command decoders and control, sensor 
interface module, the new CI V2 interface protocol, and the power source, (all shown in 
green fill) are all based on industry-proven technology and are known to those skilled in 
the art. 

Note that the RFID 86 includes a Class-2 or higher tag that includes highly- 
10 simplified, effective, security encryption circuit 4F like the one shown in FIG. 12, or 
other suitable encryption circuit known in the art. Class-2 and higher circuits show how 
existing symmetric double-secret-code encryption systems can be improved and 
simplified at the same time. To prevent eavesdropping, the 32-bit secret codes are never 
directly transmitted over the air link in either direction between the RFID 86 and the 
15 reader 76. Instead, the RFID 86 begins the exchange by spontaneously generating a 16- 
bit random number that is then sent to the reader 76. The reader 76 responds with a 16- 
bit random code of its own that it then sends to the RFID 86. Both the reader 76 and the 
RFID 86 then mix parts of this random code with other parts of their respective 32-bit 
secret codes using a "hash circuit". To deter attack against even a very powerful code- 
20 breaking attack, the hash function is repeated as many as 8-times, and both the number of 
hash-scrambling cycles, and the amount of register offset between each cycle, vary 
randomly under control of scrambled counter codes that are hidden from an outside 
observer. The counter codes themselves are a hidden function of both the random 
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number and the secret codes. Finally, all data, commands, and addresses flowing across 
the air link between the tag and the reader are scrambled against the output of this hash 
generator. This includes the "personal information" data referred to in this invention. 
Unless all the bits are correctly decoded, both the tag and reader are designed to ignore 

5 the command and ignore the data. 

Note also, that once the 32-bit secret code is initially either written into, or 
alternatively read out from, the RFID 86; these secret codes are never transmitted either 
into or out of the RFID 86 again. This prevents anyone from monitored these codes, 
copying them, and breaking the security. Instead, the double 32-bit secret codes are used 

10 to scramble and de-scramble the data but are themselves never transmitted in or out of the 
tag. The highly-asymmetric nature of the scrambling or "hash" circuit makes it 
impossible to deduce the secret code from the outputs that are sent back and forth to the 
tag. 

Each RFID 86 may have a different randomly assigned secret code, so gaining 
15 access to one secret code provides no help in gaining access to other secret codes. 

Finally, it is obvious to those skilled in the art that the length of the secret code and the 
complexity of the scrambler circuit may be increased if necessary to increase the data 
security even further. 

In certain still alternate preferred embodiments of the present invention the RFID 
20 tag 86 may contain a transponder, and the transponder may have recorded or enabled the 
recording of one, some, or all of at least the following types of electronic information that 
can be remotely accessed by an RFID reader 76: 
o a unique serial number; 
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o public descriptive information about this currency or document; 
o a first level of hidden information used to determine the authenticity of this 
document; 

o a first secret code or "authorization key" and encryption circuit to protect this first 

level of hidden information; 
o a second level of hidden information that can also be used to determine the 

authenticity of the financial instrument; and 
o a second secret code or "authorization key", different from the first, to protect the 

second level of hidden information. 

One, two, or more of the secret codes, serial numbers, EPCs, EDCs, or other 
suitable data or information stored within and/or outside of the RFID tag 4, 86 may used 
to protect against counterfeiting or unauthorized modification of or access to information 
stored or contained in the RFID tag 4, 86 may be an EPC or EDC. Additionally, while a 
unique code, serial number, authorization code, or other suitable information may be used 
to help discourage, inhibit or detect counterfeiting, an alternate use may be to enable 
tracking and counting money. 

The hidden hierarchal information may optionally be useful to detect counterfeit 

currency and other counterfeits of other important documents and may be designed to 

operate at one, two or more hierarchal levels. The lower levels of password-coded 

information may be used to protect merchants, vending machines, bank tellers, and others 

from counterfeit currency. However the widespread use of such first level passwords 

may make a first level password more vulnerable to compromise and fraud. Therefore 

the first level of electronic password security may be backed up with multiple higher 
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levels of authentication security, each level of security optionally comprising an 
independent security code or plurality of codes. In certain preferred embodiments of the 
present invention, millions of merchants may have access to the first level password 
codes, while only a few hundred thousand bankers will have the second level security 

5 password codes. The second level security codes may thus more securely be used to test 
the currency with both first and second level codes. And an even smaller number of 
entities, such as regional banks, may back up the local banks with a third level of 
authentication. Finally, a government agency or authorized agent of a government 
agency may have a sixth level of code that is shares with no one — and which no one 

10 even might know exists - that that the agency or agent uses surreptitiously to look for 
counterfeiting based upon illegal transmission of knowledge from the highest level of 
security. 

These currency and other secure documents are also an efficient instruments for 
delegating authority from one agency to another. For example the Federal Government 
15 may delegate to a printer the authority to print currency simply by transmitting certain 
secret information and other authorization codes to that printer. 

The foregoing descriptions of specific embodiments of the present invention have 
been presented for purposes of illustration and description. They are not intended to be 
exhaustive or to limit the invention to the precise forms disclosed, and obviously many 
20 modifications and variations are possible in light of the above teaching. The 

embodiments were chosen and described in order to best explain the principles of the 
invention and its practical application, to thereby enable others skilled in the art to best 
utilize the invention and various embodiments with various modifications as are suited to 
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I 

the particular use contemplated. It is intended that the scope of the invention be defined 
by the claims appended hereto and their equivalents. 
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